Manuals / Patton electronic / Computer Equipment / Server

Patton electronic 29XX manual Filter IP

Models: 29XX

1 326

Page 161

Chapter 13 Filter IP
Chapter contents
Introduction	162
Defining a filter	162
Modify Filter	162
Name (filterIpName)	163
Direction (filterIpDirection)	163
Action (filterIpAction)	164
Source IP	164
Comparison (filterIpSourceAddressCmp)	164
Address (filterIpSourceIp)	164
Mask (filterIpSourceMask)	164
Destination IP	165
Comparison (filterIpDestinationAddressCmp)	165
Address(filterIpDestinationIp)	165
Mask(filterIpDestinationMask)	165
Source Port	165
Comparison (filterIpSourcePortCmp)	165
Port (filterIpSourcePort)	165
Destination Port	165
Comparison (filterIpDestinationPortCmp)	165
Port (filterIpDestinationPort)	166
Protocol (filterIpProtocol)	166
TCP Established (filterIpTcpEstablished)	166
Default for dialin (filterIpDefaultDialin)	166
Default for dialout (filterIpDefaultDialout)	167
An example of using a filter	167

161

Page 161

Image 161

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Structure AudienceGeneral conventions Typographical conventions used in this documentMouse conventions Introduction Chapter contentsHTTP/HTML and Snmp Object Format Introduction Logging into the HTTP/HTML Administration PagesSaving HTTP/HTML Object Changes Home Home IntroductionOperating Status Variables Immediate Actions buttons Immediate ActionsImport/Export Import/Export main window Export ConfigurationTypical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Total System AlarmsX alarmTotal Displaying the Alarms windowAlarms Alarm Response OutputsModify Response-Configuring the alarm response system Alarm Snmp Trap IP 1 alarmTrapIp0 Alarm Syslog Priority syslogAlarmPriorityAlarm Snmp Trap IP 2 alarmTrapIp1 Alarm Snmp Trap IP 3alarmTrapIp2Modify Alarms settings window Modify Alarms-Configuring alarm severity levelsAuthentication ID suID Validated authentications auAuthenticationsValidTotal Displaying the Authentication windowValidated via primary server auAuthenticationsValidPrimary Statistics sectionDenied authentications auAuthenticationsDenied Validated via static database auAuthenticationsValidStaticPrimary server timeouts auPrimaryServerTimeouts Secondary server timeouts auSecondaryServerTimeoutsValidation auValidation Configuration sectionHost Address auHostAddress Timeout auTimeoutSecondary Host Address auSecondaryHostAddress Host Port auHostPortAccounting Port auAcctPort Accounting Enable auAccountingEnableRadius Packet Format auRadiusPacketFormat Radius Session ID Size auRadiusRunningIdSizeRadius Session ID auRadiusRunningId Setting Up AuthenticationAuthentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Adding Static Users Static User AuthenticationModify Static User Service Port suServicePort Service IP suServiceIPService Mask suServiceMask Filter ID suFilterIdDAX Circuit Type daxClockMode Configuring the DAXFallback Reference daxClockFallbackRef Main Reference daxClockMainRefClock Status daxClockFailure DAX Clock Status alarm conditionDial Dial Dial Dial Phone Dial Introduction Call Sorting diPageSort Dial In main windowCall ID diactIndex ML ID diactMultiIndexDuration diactSessionTime State diactStateDisconnect Reason diactTerminateReason Modulation diactModulationUsername diactUsername Dial Modulations windowConnect Speed diactTxSpeed Transmit Connection Speed diactTxSpeed DSP Link diactDSPIndexConnection Modulation diactModulation Receive Connection Speed diactRxSpeed Error Correction diactErrorCorrectionData Compression Protocol diactCompression Locally Initiated Renegotiates diactLocalRenegotiatesDial Telco window Dial Telco windowTime Slot diactSlotIndex WAN Link diactLinkIndexTime Call Is/Was Active diactSessionTime Termination Reason diactTerminateReasonShared Unique ID diactMultiIndex Dial Protocol windowProtocol diactProtocol LCP Authentication LCPAuthOptionsIP Address diactIP Port # on Remote Machine diactPortNext Hop diForceNextHop Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Dial In Details window Dial In DetailsDial In Modify window modify Login, Service, and DNS objects Dial In Modify default windowIP Address Pool diIpPool Modify LoginLogin Technique diLoginTechnique Modify Service Password Prompt diPasswordPromptDefault Service diService Username Prompt diUsernamePromptModify Domain Name Server Success Banner diSuccessBanner Modify AttemptsFailure Banner diFailureBanner Modify Configuration Modify Maximum Time 110 diV110Enable Modify Isdn ConfigurationModify Modem Configuration Modify V.92 ConfigurationK56flexdiModemK56Enable V90diModemV90EnableV34diModemV34Enable V32diModemV32EnableGuard Tone diModemGuardTone Billing Delay diBillingDelayCarrierLossDuration diModemCarrierLossDuration Answer Tone LengthdiModemAnswerToneLengthDirect0-No compression will be used Manage Dnis WindowManage Dnis main window Called Calling Number dnisPoolDesrcDialedNumber Dnis Entry WindowDnis Profiles Dnis Profiles Main Window Login Technique dnisProfileLoginTechniqueID dnisIpProfileId IP Pool dnisProfileAssignedIpPoolService IP dnisProfileServiceIP Service Port dnisProfileServicePortTelnet Mode dnisProfileTelnetMode Dovbs dnisProfileDOVBSAdd a Dnis Profile Status dnisIpProfileStatusDnis Profile Entry Window IP Pool dnisProfileSAssignedIpPoolDovbs dnisProfileDOVBS Service Port dnisProfileServicePort ID dnisIpPoolId Dnis IP Pools WindowIP Address Pool dnisIpPool Status dnisIpPoolStatusDnis IP Pools Entry window Dnis IP Pool Entry WindowUser Statistics Call Identification, Session Dial In User Statistics windowCall Identification Session Termination Reason diactTerminateReason Time Left In Session diactRemainingSessionDial Dial State at termination diactTerminateState LCP Statistics PPP StatisticsRemote MRU diStatRemoteMRU LCP Authentication LCPAuthOptionsLocal Multilink Mrru diStatLcpLocalMRRU Remote Multilink Mrru diStatLcpRemoteMRRURemote-Local AC Comprsn diStatRemoteToLocalACComp Local-Remote AC Comprsn diStatLocalToRemoteACCompTransmit Frame Check Seq. Size diStatTransmitFcsSize Receive Frame Check Seq. Size diStatReceiveFcsSizeLocal-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Operational Status diIpOperStatusRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Remote Max Slot ID diIpRemoteMaxSlotIdSecondary Domain Name Server diactSecondaryDNS Primary Domain Name Server diactPrimaryDNSFilters diStatIpFilterAtoJ PhonePhysical Layer DataModulation Symbol Rate diactSymbolRate Error Correction diactErrorCorrectionTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeedRemote Initiated Retrains diactRemoteRetrains Locally Initiated Retrains diactLocalRetrainsRemote Initiated Renegotiates diactRemoteRenegotiates Dial Out Dial Out 105 106 Call Sorting doPageSort Dial Out Main WindowActive Calls doActive Call ID doactIndexState doactState User doactUsernameDuration doactSessionTime Disconnect Reason doactTerminateReason109 Speed doactTxSpeed Dial Out Details windowModulation doactModulation Dial Out Details window Dial Out Modify windowLogin Technique doLoginTechnique TCP Type doServiceTypePassword Prompt doPasswordPrompt TCP Port doTcpPortFailure Banner doFailureBanner Login Attempts Allowed doAllowAttemptsMaximum Idle Time doIdleTimeout Maximum Session Time doSessionTimeoutTime to Login sec doLoginTimeout Call History Timeout min doLingerTimeV22 doModemV22Enable Isdn doModemISDNEnableV21 doModemV21Enable Maximum Speed doModemMaxSpeedGuard Tone doModemGuardTone Minimum Speed doModemMinSpeedCarrier Loss Duration doModemCarrierLossDuration Retrain doModemRetrainStatus locationstatus Dial Out Locations WindowRestrict Modification doModemRestrictMods Add Location Idle Timeout locationIdleTimeout Multilink locationConfigMultilinkMaximum Session Time locationSessionTimeout Authentication Technique locationAuthTechniqueDialing Locations View/Modify location detailsAdd Modem Profile Dial Out Modem Profiles WindowLocations Link Profile ID modemProfileIdCarrier Loss Duration modemCarrierLossDuration Guard Tone modemGuardToneRetrainmodemRetrain Compression modemCompressionDial Out User Statistics Window Billing Delay modemBillingDelayStatus modemStatus View modem profileCall Identification Password doactPasswordCall ID doactIndex Username doactUsernameDsp Link doactDSPIndex Minutes until timeout doactRemainingIdleWan Link doactLinkIndex Time Slot doactSlotIndex126 Bad Address doStatBadAddresses PPP StatisticsBad Controls doStatBadControls Packets too long doStatPacketTooLongsLocal MRU doStatLocalMRU Remote LCP Authentication doStatLcpAuthRemote MRU doStatRemoteMRU Local Multilink Mrru doStatLcpLocalMRRURemote PPP Protocol Compression doStatRemoteToLocalProtComp Local PPP Protocol Compression doStatLocalToRemoteProtCompLocal AC Compression doStatLocalToRemoteACComp Remote AC Compression doStatRemoteToLocalACCompNumber Called doactNumberDialed Bad Packets doactErrorFramesOctets Sent doactSentOctets Octets Received doactReceivedOctetsConnection Modulation doactModulation Error Correction Protocol doactErrorCorrectionTx Connection Speed doactTxSpeed Rx Connection Speed doactRxSpeedAn example section of dialout Callback Callback diCallbackConfig Dial-in Modify ConfigurationDial-in user waiting to be called back Dial-in Main WindowCallback phone number suCallbackNumber Radius ConfigurationCallback Configuration suCallbackConfig Dialout Accounting informationDrop and Insert Call History Timeout drLingerTime Session Timeout drSessionTimeoutDrop and Insert main window Active Calls drActiveHow Drop and Insert works Drop and insert diagram Using Drop and InsertDigital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #2 Use dspUseSecond Instance #1 Use dspUsefirstInstance #2 State dspStateSecond DSP Memory Capture DSP Connection PerformanceDSP PCM Capture DSP Debugging EventsConnection Summaries DSP Connection Totals Reboot-B dspTotalRebootDueToError Reboot-A dspTotalRebootDueToFailsRemote-Reneg dspRemoteRenegotiates Local-Retrain dspLocalRetrainsDesired State dspDesiredState DSP information windowDSP Status Call Statistics Debug Statistics Ethernet State boxEtherAState Ethernet Main WindowPrimaryIPAddress boxEtherAPrimaryIpAddress ConfigPrimaryIpMask boxEtherAPrimaryIpMask PrimaryIpFilters boxEtherAPrimaryIpFiltersEthernet Modify Window Ethernet Modify WindowEthernet Statistics Technique ConfigurationAlignment Errors dot3StatsAlignmentErrors SQE Test Errors dot3StatsSQETestErrors FCS Errors dot3StatsFCSErrorsOther Errors dot3StatsInternalMacTransmitErrors Carrier Sense Errors dot3StatsCarrierSenseErrorsChip Set ID dot3StatsEtherChipSet Other Received Errors dot3StatsInternalMacReceiveErrorsReceived Frames Too Long dot3StatsFrameTooLongs Filter IP Modify Filter Defining a filterDirection filterIpDirection Name filterIpNameSource IP Action filterIpActionComparison filterIpSourceAddressCmp Address filterIpSourceIpDestination Port Destination IPSource Port TCP Established filterIpTcpEstablished Port filterIpDestinationPortProtocol filterIpProtocol IP Filter showing default for dialout An example of using a filter168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main windowHdlc Statistics on Link Link X frDlcmiIfIndexDlmi Window Error Threshold N392 frDlcmiErrorThreshold Signalling frDlcmiStateMultiCast Service frDlcmiMulticast Data Link Protocol frDlcmiAddressLMI Interface frDlcmiInterface Dlci windowBidirectional PollingfrDlc rDlcmiPollingBiDir Polling Verification T392 frDlcmiPollingVerificationDlci frCircuitDlci Congestion frameEnableCongestionInterface # FrameIPInterfaceNum State frCircuitStateInterfaces Number ifIndex Interfaces main windowOperational Status ifOperStatus Admin Stat ifAdminStatusType ifType Description ifDescr Interface DetailsSpeed ifSpeed Max Transfer Unit ifMTUPhysical Address ifPhysAddress Last Change ifLastChangeRequested Errored Packets ifOutErrors Received Errored Packets ifInErrorsReceived and Discarded w/No Errs ifInDiscards Received w/Unknown Protocol ifInUnknownProtos184 16 IP 186 IP main window IP main windowDiscarded for Header Errors ipInHdrErrors Default Time-To-Live ipDefaultTTLDiscarded for Address Errors ipInAddrErrors Forwarding ipForwardingReassembly Timeout ipReasmTimeout Discarded w/No Errors ipInDiscardsForwarded Datagrams ipForwDatagrams Discarded for Unknown Protos ipInUnknownProtosModify TCP main window TCPRetransmit-Timeout Minimum tcpRtoMin Retransmit-Timeout Algorithm tcpRtoAlgorithmRetransmit-Timeout Maximum tcpRtoMax Established Resets tcpEstabResetsTCP Details UDP Others Received with No Delivery udpInErrors Handling of Netbios UDP Broadcasts boxNetbiosUdpBridgingReceived udpInDatagrams Received With No Ports udpNoPortsBlock Icmp redirects boxBLockIcmpRedirects Errors icmpInErrors, icmpOutErrorsIcmp Receive/Send Messages window Total Received/Sent icmpInMsgs, imcpOutMsgsSource Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchs Parameter Problems icmpInParmProbs, icmpOutParmProbsTimes Exceeded icmpInTimeExcds, icmpOutTimeExcds Redirects icmpInRedirects, icmpOutRedirectsEcho Replys icmpInReps, icmpOutReps Addressing InformationTime Stamps icmpInTimestamps, icmpInTimestamps Address Mask Requests icmpInAddrMasks icmpOutAddrMasksRouting Information Entry Reassembly Maximum Size ipAdEntReasmMaxSizeEntry Interface Index ipAdEntIfIndex Entry Subnet Mask ipAdEntNetMaskMask ipRouteMask Destination ipRouteDestCost RouteCost Gateway RouteGatewayInterface ipRouteIfIndex State RouteStateAdding a static routes to a remote network Adding a point-to-point routeAdding a static point-to-point route to a remote host Advanced… Forwarding table windowProtocol ipRouteProto Next Hop ipRouteNextHopType ipRouteType Route Destination ipRouteDest IP Routing Destination windowInfo ipRouteInfo Tag RouteTag Seconds Since Updated ipRouteAgeAddress Translation Information Net Address ipNetToMediaNetAddress Interface ipNetToMediaEntryPhysical ipNetToMediaPhysAddress Type ipNetToMediaTypeMFR Version 218 Country lineSigCountry Line SignallingMFR Version 2 main window Interregister Signalling MFR Version 2 Modify window MFR Version 2-Modify213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version Route Changes Made rip2GlobalRouteChanges RIP Version 2 main windowResponses Sent rip2GlobalQueries Address rip2IfConfAddressAdding a RIP address Receive rip2IfConfReceiveAuthentication Type rip2IfConfAuthType RIP Version 2-ConfigurationAuthentication Key rip2IfConfAuthKey Domain rip2IfConfDomainRIP Version 2 Statistics Status rip2IfStatStatus Sent Updates rip2IfStatSentUpdatesSnmp Snmp window Snmp windowError Status Too Big snmpInTooBigs ASN ParseErrors snmpInASNParseErrsError Status Read Only snmpInReadOnlys Generated Errors snmpInGenErrsOut Authentication Failure Traps snmpEnableAuthenTraps Generated Errors snmpOutGenErrsGet Requests snmpOutGetRequests Get Next Requests snmpOutGetNextsSystem System Version boxSnmpVersion System main windowSnmp and Http Message Blocks ManufacturerTotal Size boxHeapSize Operating System Heap MemoryFree boxHeapFreeSpace Largest boxHeapLargestSpaceInstallation Payable featuresEnclosure System OtherWeb Settings boxBackgroundFlag System Services sysServicesPhysical Location sysLocation Monitor Privilege boxMonitorPrivilegeSystem-Modify window System-Modify windowEnable Payable FeaturesboxFeatureEnableKey No. of Buffers boxbuffercount System-Packet Holding Message BlocksBuffer Size boxbuffersize No. of Times UnavailableboxCountBufferUnavailable No. Free boxbuffersfreeNo. of Tasks Waited boxCountBufferTaskWait System Log System Log main window System Log Main WindowPriority System Log-ModifyDaemons Min Priority for Snmp Trap Daemon syslogTrapPriority Min Priority for Console RS-232 syslogConsolePriorityMin Priority for Flash Storage syslogFlashPriority Unix Facility syslogUnixFacility Min Priority for RAM SyslogTablePriorityMaintain Flash Storage syslogFlashClear MaintenanceCall Trace syslogCallTrace Message slMessage System Log-Volatile MemoryTime slTick What the System Log messages are telling you System Log-Non-Volatile MemoryTime slfTick Message slfMessageT1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window Type dsx1LineType T1/E1 Link Activity main windowLink dsx1LineIndex Physical Line Alarms dsx1LineStatus Alarms PresentFar End Alarm Failure Circuit ID dsx1CircuitIdentifierLoss Of Signal Failure Alarm Indication Signal AIS FailureTS16 Alarm Indication Signal Failure Loss Of Frame FailureSnmp MIB definition Isdn Signaling Alarms linkSignalStatusE1 TS16 AIS Valid Intervals dsx1ValidIntervals Line Status-ConfigurationTime Elapsed dsx1TimeElapsed Circuit ID dsx1CircuitIdentifier WAN Circuit Configuration-ModifyLine Interface Settings Receive Equalizer linkRxEqualizer Line Type dsx1LineTypeLine Coding dsx1LineCoding Signalling Settings Yellow Alarm Format linkYellowFormatSignal Mode dsx1SignalMode Line Build Out linkLineBuildOutTest Settings Send Code dsx1SendCode Loopback Config dsx1LoopbackConfigError Injection linkInjectError Desired Function channelfunction Line Status-Channel AssignmentChannel channelIndex CurrentState ChannelState Near End Line Statistics-CurrentSeverely Errored Seconds dsx1CurrentSESs Errored Seconds dsx1CurrentESsSeverely Errored Frame Seconds dsx1CurrentSEFSs Line Errored Seconds dsx1CurrentLESsNear End Line Statistics-History Near End Line Statistics-Totals Severely Errored Frame Seconds dsx1TotalSEFSs Severely Errored Seconds dsx1TotalSESsLine Errored Seconds dsx1TotalLESs Bursty ErroredSeconds dsx1TotalBESsFar End Line Statistics-Current Far End Line Statistics-History Severely Errored Frame Seconds dsx1FarEndIntervalSEFSs Severely Errored Seconds dsx1FarEndIntervalSESsLine Errored Seconds dsx1FarEndIntervalLESs Bursty Errored Seconds dsx1FarEndIntervalBESsFar End Line Statistics-Totals Using Non-Facility Associated Signaling Nfas Bursty Errored Seconds dsx1FarEndTotalBESsConfiguring Nfas Degraded Minutes dsx1FarEndTotalDMsRAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP Line Status-Channel Assignment WAN Circuit Configuration windowPPP Main Window PPP configurationIp Mask pppServiceIpMask Ip Address pppServiceIpAddressDefault Settings State pppActStateAuthentication Side pppDefaultAuthenticationSide Authentication Technique pppDefaultAuthenticationTechniqueAuthentication Username pppDefaultAuthenticationUsername Authentication Password pppDefaultAuthenticationPasswordPPP Link Window Compression pppDefaultIpCompressionLink frDlcmiIfIndex Status framerelStatusLink Configuration Authentication Username pppAuthenticationUsername Authentication Side pppAuthenticationSideAuthentication Password pppAuthenticationPassword Security Level pppAccessLevelAllow Magic Number Negotiation pppMagicNumber Link Compression pppLinkCompressionBad Address pppStatBadAddresses Bad Controls pppStatBadControlsACC Map pppStatLocalToPeerACCMap LCP AuthenticationpppStatLcpAuthPeer-Local ACC Map pppStatPeerToLocalACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACCompTransmit Frame Check Seq. Size pppStatTransmitFcsSize Remote-Local AC Comprsn pppStatRemoteToLocalACCompReceive Frame Check Seq. Size pppStatReceiveFcsSize Operational Status pppIpOperStatusLocal Max Slot ID pppIpLocalMaxSlotId Remote Max Slot ID pppIpRemoteMaxSlotIdOctets Sent pppActSentOctets Octets Received pppActReceivedOctetsLink Configuration Modify Link Configuration WindowLayer 2 Tunneling Protocol L2TP Static Authentication L2TP ConfigurationL2TP Radius Authentication Radius AuthenticationCisco Configuration Configuration ExampleThis will enable the use of tunnel authentication Contacting Patton About window Patton Electronics Company contact informationLicense Definitions End User License AgreementTitle WarrantyTerm Grant of LicenseAppendix a Supported Radius Attributes Access-Request Attributes Access-Accept AttributesAccounting-Start Attributes Access-Challenge AttributesAccounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference Radius Client/Server Architecture Configuring a Radius serverWhat Is RADIUS? Radius Services Radius Standards Radius Authentication ProcedureRadius Resources RADIUS-Where Can I Get It?Overview Configuring RadiusConfiguring Radius Authentication Authentication window Finding the Snmp Name Using Snmp with the Access ServerFinding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Nfas Configuring Non-Facility Associated Signaling NfasLine Configuration Configuring Frame RelayWAN Channel Assignment main screen Configuring PVCs Configuring Frame Relay link parametersClick on Submit Query Configuring Permanent Virtual CircuitsIP routing with Frame Relay example Configuring IP routing with a Frame Relay LinkClick Add Route Link Status and the IP ForwardingSetting up IP address pools by configuring Dnis Ip Pools Configuring DnisSetting up a Dnis user profile Setting up a Dnis groupConfiguring the RAS Configuring a leased line/dedicated line connectionModem properties window Configuring the remote end using Microsoft WindowsUnder the Options tab set Redial attempts to a high number

Chapter 13 Filter IP

Chapter contents